9468 matches found
Consumer Groups Urge FTC to Halt Facebook Data Collection Program
A collection of privacy and consumer groups from the United States and Europe has asked the Federal Trade Commission to force Facebook to suspend a recently installed program that mines information on sites that users’ visit around the Web in order to serve them interest-based ads. The groups say...
Fedora 20 : php-ZendFramework-1.12.7-1.fc20 (2014-8308)
Update to 1.12.7 fixes CVE-2014-4914 aka. ZF2014-04: Potential SQL injection in the ORDER implementation of ZendDbSelect Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...
Threat Outbreak Alert RuleID10631: Email Messages Distributing Malicious Software on July 11, 2014
Medium Alert ID: 34905 First Published: 2014 July 14 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10631 may contain the following files: Name | Siz...
TinyShop二次注入一枚。
简要描述： rt TinyShop v1.0.2 详细说明： 还是 protected\controllers\simple.php文件 public function orderact ................. $address = $model-table"address"-where"id=$addressid"-find; //if!$address$this-redirect"order",false,Req::args; //if!$paymentid$this-redirect"order",false,Req::args; $data'orderno' =...
WordPress Plugin My Category Order <= 2.8 - SQL Injection Vulnerability
No description provided by source. Source: WordPress Plugin: My Category Order = 2.8 mycategoryorder.php / SQL Injection Vulnerability Download: http://wordpress.org/extend/plugins/my-category-order/ No Dork Author: ManhLuat93 at hcegroupdotnet Errors appears only when you have admin control Open...
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities
No description provided by source. Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...
DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...
MailOrderWorks 5.907 - Multiple Vulnerabilities
No description provided by source. Title: ====== MailOrderWorks v5.907 - Multiple Web Vulnerabilities Date: ===== 2013-01-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=798 VL-ID: ===== 796 Common Vulnerability Scoring System: ==================================== 4....
Smartwin Technology CyberOffice Shopping Cart 2.0 Price Modification Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1733/info Smartwin Technology CyberOffice Shopping Cart is a shopping cart application for e-commerce enabled websites running Windows NT 4.0 or 2000. The order form CyberOffice Shopping Cart utilizes can be easily modifi...
smeweb 1.4b (sql/xss) Multiple Vulnerabilities
No description provided by source. ======================================================= SMEweb 1.4b SQL/XSS Multiple Remote Vulnerabilities ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Tea...
Star Articles 6.0 - Remote Blind SQL Injection exploit
No description provided by source. ?php / ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + stararticles blind sql injection Vulnerability xpl + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Mountassif Moad DATE : 26 nov 2008 APPLICATIO...
DC Scripts DCShop Beta 1.0 02 File Disclosure Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2889/exploit DCShop is a GCI-based ecommerce system from DCScripts. Under certain configurations, a beta version of this product can allow a remote user to request and obtain files containing confidential order data,...
ASPCart 4.5 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21152/info ASPCart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Xbtit 2.0.0 - SQL Injection Vulnerability
No description provided by source. Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File : /index.php?page=users&order=SQL&by=ASC ExploiT :...
CubeCart <= 3.0.6 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl cijfer-ccxpl - CubeCart =3.0.6 Remote Command Execution Exploit Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ perl ./cijfer-ccxpl.pl -h www.xxx.com -d [email protected] /$ id;uname -a uid=48apache...
tsep <= 0.942.02 Multiple Vulnerabilities
No description provided by source. TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: powered by TSEP - The Search Engine Project ceLwaux 30.06.2009, uasc.org.ua Blind SQL-Inj /admin/rankform.php ----------------------------------------------------------------------------- 23: //...
WordPress Contact Form plugin <= 2.7.5 - SQL Injection
No description provided by source. Exploit Title: WordPress Contact Form plugin = 2.7.5 SQL Injection Vulnerability Date: 2011-10-13 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Software Link: http://downloads.wordpress.org/plugin/contact-form-wordpress.z...
LHA 1.x Multiple extract_one Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10354/info LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive to execute arbitrary code or corrupt arbitrary files when the archive is operated on. These issues are triggered in the...
ECSHOP the presence of a persistent XSS risk-vulnerability warning-the black bar safety net
ECSHOP some places thereXSSthe risk,can get admin cookies. ECSHOP filter do well,but the hundred Secret one sparse..... First,feel free to purchase merchandise, the purchase information,the recipient address or the recipient address is writtenXSScode,orders submitted after the background check...
openSUSE Security Update : lighttpd (openSUSE-SU-2012:0240-1)
This update of lighttpd fixes an out-of-bounds read due to a signedness error which could cause a Denial of Service CVE-2011-4362. Additionally an option was added to honor the server cipher order resolves lighttpd2364. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...